Improvements to bounds checks, input validation, and memory management were made in macOS Ventura 13.4, iOS and iPadOS 16.5, tvOS 16.5, watchOS 9.5, and Safari 16.5 to address the three zero-day vulnerabilities.Īccording to BleepingComputer, the list of affected devices is quite large and it includes: The other two, which can both be exploited by tricking targets into loading maliciously designed web pages (web content), are an out-of-bounds read that allows attackers to access private data and a use-after-free flaw that permits arbitrary code execution on infected devices. The first vulnerability is a sandbox escape that enables remote attackers to break out of Web Content sandboxes. The flaws were all found in the multi-platform WebKit browser engine, as the company revealed in security advisories released to inform its clients about the active exploitation of the flaws.
Apple resolves three new zero-day vulnerabilities used to compromise iPhones and Macs.
0 kommentar(er)
